High
CVE-2026-86049
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 28
Reset filters
Medium
CVE-2026-73416
JupyterLab: PyPI extension blocklist package-name canonicalization bypass
High
CVE-2026-54528
jupyterlab-git excluded_paths Case-Sensitivity Bypass Allows Reading Excluded Directories
High
CVE-2026-42557
JupyterLab's command linker attributes in HTML enable one-click command execution from untrusted content
High
CVE-2025-30167
Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
High
CVE-2025-30370
jupyterlab-git has a command injection vulnerability in "Open Git Repository in Terminal"
High
CVE-2024-22421
JupyterLab vulnerable to potential authentication and CSRF tokens leak
High
CVE-2024-22415
Unsecured endpoints in the jupyter-lsp server extension
Critical
CVE-2026-44727
Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP
Critical
CVE-2026-44182
Jupyter Enterprise Gateway: Kubernetes Manifest Injection in Jinja2 Template Rendering
Critical
CVE-2026-44181
Jupyter Enterprise Gateway: Jinja2 Template Server Side Template Injection resulting in Remote Code Execution
Critical
CVE-2026-44180
Jupyter Enterprise Gateway: ContainerProcessProxy._enforce_prohibited_ids Bypass
High
CVE-2026-40110
Jupyter Server has a CORS Origin Validation Bypass via `re.match()` in `allow_origin_pat`
High
CVE-2026-40934
Jupyter Server's Authentication Cookies Remain Valid After Password Reset and Server Restart
High
CVE-2026-35397
Jupyter Server: Path Traversal via incorrect startswith() root directory check allows access to sibling directories
Medium
CVE-2025-61669
Jupyter Server has an open redirection vulnerability in `next` query parameter
Medium
CVE-2026-23528
Dask Distributed is Vulnerable to Remote Code Execution via Jupyter Proxy and Dashboard
Medium
CVE-2024-35225
Jupyter Server Proxy allows users to run arbitrary external processes alongside their notebook server and provide authenticated web access to them. Versions of 3.x prior to 3.2.4 and 4.x prior to 4.2.
High
CVE-2024-35178
Jupyter server on Windows discloses Windows user password hash
Critical
CVE-2024-28179
Jupyter Server Proxy allows users to run arbitrary external processes alongside their Jupyter notebook servers and provides authenticated web access. Prior to versions 3.2.3 and 4.1.1, Jupyter Server
Medium
CVE-2023-49080
jupyter-server errors include tracebacks with path information
Medium
CVE-2023-40170
cross-site inclusion (XSSI) of files in jupyter-server
Medium
CVE-2023-39968
Open Redirect Vulnerability in jupyter-server
High
CVE-2022-29241
Jupyter server Token bruteforcing
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.